Link to portal for reporting security vulnerabilities in Microsoft packages

[jcjiang]

Is your feature request related to a problem? Please describe.

Currently, the only option for users seeking to report a security vulnerability they found in a hosted package is to submit the report under:

This is an issue because

• these reports enter with the category of 'this package has malicious code,' which is a different problem
• comes in as email to a list, can be lost
• case does not undergo formal evaluation and severity rating
• no Microsoft CVE attached
• not updated on the regular security monthly release schedule

Describe the solution you'd like

Add an option to the dropdown:

Selecting the option results in the following text:

The hyperlink leads to the following form:

Additional context

This feature came from conversation with VS security and MSRC PMs.